This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: f9wtPB+D3vhod+jw24Y/g0KW5ATEVQ/yl7yA3zxed48= Subject key identifier: 7E:2E:9B:C8:B1:AF:30:19:AC:52:59:78:A0:B0:49:63:F2:94:A9:6B Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 41BEFBDFD686FA5456A80710D960D6E84B3AB9C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 03A4 Signing time: Tue 16 Dec 2025 07:51:51 +0000 Manifest this update: Tue 16 Dec 2025 07:46:51 +0000 Manifest next update: Fri 19 Dec 2025 15:32:51 +0000 Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=) 2: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: cPJv7ugpqT3ysMTQ2Ik7ayE81sIG3mVA3TlZZpcq+CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 15:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:be:fb:df:d6:86:fa:54:56:a8:07:10:d9:60:d6:e8:4b:3a:b9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Dec 16 07:46:51 2025 GMT Not After : Dec 19 15:32:51 2025 GMT Subject: CN=7E2E9BC8B1AF3019AC525978A0B04963F294A96B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:05:d7:97:84:3d:9c:8e:c8:fb:52:79:ff: be:82:76:1c:c9:15:b1:2d:a3:e8:a4:b0:96:b0:e4: 5e:65:89:98:a2:fe:a9:7f:38:9a:43:f2:9f:d7:a7: 55:7a:a8:fa:a1:5e:b7:71:87:98:40:dd:ca:3c:c2: ba:f8:62:bb:32:2e:bb:44:c0:60:25:fc:91:d8:80: 73:d8:50:b0:0e:0b:58:fc:ca:3d:f9:a9:a7:bc:24: 76:be:cb:9b:57:e1:d6:0e:6c:be:11:c1:7a:ab:82: af:7f:ba:9b:28:d6:c1:0d:a6:5b:3e:19:8c:c7:37: 2b:cc:07:fe:b3:f7:e0:a0:d2:fa:a4:f9:17:38:f5: a9:db:0d:c5:17:1d:83:91:8a:b0:2a:5b:c6:0a:c5: 2d:91:44:b3:d7:b4:b9:a0:a8:4d:27:34:49:39:c1: 9d:9e:f1:1e:49:bc:cf:12:e5:39:d3:b8:0f:a1:8f: 0c:01:6f:84:29:00:77:b7:1c:fa:2c:9e:75:a1:46: 66:75:ee:76:5f:55:24:ab:8c:33:38:ea:27:61:54: af:fa:aa:2a:fb:66:f1:58:7b:d9:76:af:8a:d0:76: 83:a1:1e:1a:d0:a5:ea:8a:e5:e5:8e:d0:ff:71:a8: e1:ca:a0:0c:6d:9e:f5:a6:a4:62:b5:d2:ad:04:b5: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2E:9B:C8:B1:AF:30:19:AC:52:59:78:A0:B0:49:63:F2:94:A9:6B X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7b:d9:95:f9:ba:dd:38:c1:6b:8b:61:39:c1:80:bd:ab:72: d6:5d:10:82:9e:a3:6a:67:73:1a:5e:bf:93:74:e4:12:93:21: f4:03:fd:ab:dc:33:f6:7d:e1:63:43:cd:a8:9a:7d:f9:42:30: ce:c4:28:e1:b4:7c:77:0c:2f:d0:45:08:1a:43:9c:40:3e:b0: 03:e5:4c:eb:7a:5c:10:bc:23:ec:c4:de:91:e8:42:3b:79:ee: f6:9a:f1:9c:fa:63:07:38:7c:42:09:48:cc:42:89:f5:d6:36: 6c:01:ff:5c:06:e5:df:9a:1d:29:ba:85:db:88:a7:e4:0f:85: 7c:cf:9b:32:d5:db:70:a8:2a:ec:cb:5a:18:d2:54:f5:d1:51: df:bd:4d:27:66:5c:47:fe:60:5d:c9:b6:d8:a6:86:16:d4:25: 1c:db:f3:4c:7f:64:95:bd:a7:6a:f6:e5:fa:41:d9:cc:d7:5e: 78:e2:b3:fd:4a:30:74:fb:03:b0:eb:50:a1:91:26:8a:e0:7e: 0e:64:82:ef:fa:7c:72:57:9d:1d:e7:c7:85:9c:55:b0:74:8a: fc:8d:7a:60:18:a8:79:5a:97:48:54:c9:b7:18:98:81:4c:2b: 74:95:d9:5f:e0:bd:f5:25:75:0b:39:fc:83:06:a5:81:93:bc: 92:33:78:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQb7739aG+lRWqAcQ2WDW6Es6ucgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNTEyMTYwNzQ2NTFaFw0yNTEyMTkxNTMyNTFaMDMxMTAvBgNV BAMTKDdFMkU5QkM4QjFBRjMwMTlBQzUyNTk3OEEwQjA0OTYzRjI5NEE5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIAXXl4Q9nI7I+1J5/76CdhzJ FbEto+iksJaw5F5liZii/ql/OJpD8p/Xp1V6qPqhXrdxh5hA3co8wrr4YrsyLrtE wGAl/JHYgHPYULAOC1j8yj35qae8JHa+y5tX4dYObL4RwXqrgq9/upso1sENpls+ GYzHNyvMB/6z9+Cg0vqk+Rc49anbDcUXHYORirAqW8YKxS2RRLPXtLmgqE0nNEk5 wZ2e8R5JvM8S5TnTuA+hjwwBb4QpAHe3HPosnnWhRmZ17nZfVSSrjDM46idhVK/6 qir7ZvFYe9l2r4rQdoOhHhrQpeqK5eWO0P9xqOHKoAxtnvWmpGK10q0EtSE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfi6byLGvMBmsUll4oLBJY/KUqWswHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ72ZX5ut04wWuLYTnBgL2rctZdEIKeo2pn cxpev5N05BKTIfQD/avcM/Z94WNDzaiafflCMM7EKOG0fHcML9BFCBpDnEA+sAPl TOt6XBC8I+zE3pHoQjt57vaa8Zz6Ywc4fEIJSMxCifXWNmwB/1wG5d+aHSm6hduI p+QPhXzPmzLV23CoKuzLWhjSVPXRUd+9TSdmXEf+YF3JttimhhbUJRzb80x/ZJW9 p2r25fpB2czXXnjis/1KMHT7A7DrUKGRJorgfg5kgu/6fHJXnR3nx4WcVbB0ivyN emAYqHlal0hUybcYmIFMK3SV2V/gvfUldQs5/IMGpYGTvJIzeEo= -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:41 2025 by rpki-client